jwt

jwt copied to clipboard

fix crash when invalid pem key is decrypted

1

yulius-take2

pem_to_key() does not handle the case where public_key:pem_decode returns []

1

It appears that invalid pem_decodes aren't handled properly. The case for [] is not handled. https://github.com/artemeff/jwt/blob/master/src/jwt.erl#L333-L340 errorContext: child_terminated reason: {{case_clause,[]}, [{jwt,pem_to_key,1, [{file,"/build/_build/default/lib/jwt/src/jwt.erl"}, {line,323}]}, {jwt,jwt_check_sig,4, [{file,"/build/_build/default/lib/jwt/src/jwt.erl"}, {line,235}]}, {jwt,check_signature,1, [{file,"/build/_build/default/lib/jwt/src/jwt.erl"}, {line,174}]}, {jwt,reduce_while,3,...

yulius-take2

Bug - Unpadded JWTs not working

2

I believe at the following line: https://github.com/artemeff/jwt/blob/master/src/jwt.erl#L146 ...an error is occurring when attempting to decode un-padded base64 values. As per [the spec](https://tools.ietf.org/html/rfc7515#section-2), ``` Base64url Encoding Base64 encoding using the URL-...

atrauzzi